141–150 of 386 posts
Earlier quoted context omitted.
On the contrary, filing a bug report now can help them get it sorted out before lots of other people run into the same problem.
He's saying the issue wasn't a specific bug, rather they just haven't turned on enough capacity.
Earlier quoted context omitted.
Thank you for taking time to share your perspective. However, I remain skeptical. It's true that a website using Cloudflare is more independent than a Facebook page, in that in the former case, the company can take their domain to another provider. But my idea of an independent Web is a large number of websites depending on a large number of high-quality hosting providers. The latter number will inevitably be smaller…
I ran a small web service in the video game industry for several years, and CloudFlare was essential to our survival, as the DDoS attacks would repeat every few weeks, and at times last 6 to 12 hours at a time. CloudFlare simply ate that up, and our customers were not impacted. Today, at a different company, different industry, we use CloudFlare for similar needs, but within physical area security networks. It's esse…
Earlier quoted context omitted.
Although Warp doesn't mask IP addresses, it should be useful for these two use cases: 1) Communicating with insecure websites (HTTP instead of HTTPS) 2) Using unsecured wireless networks (e.g. Wi-Fi at a coffee shop) Beyond these two cases, is there any advantage to using Warp? Does Warp provide any benefits for email (secure IMAP/SMTP), file sharing (BitTorrent), or other protocols?
It looks decent for hiding your traffic from your ISP
One more for people with cell phone plans that don't adhere to net neutrality: Warp can probably bypass quality caps on video streaming.
Traditional VPNs are strictly better than Warp+, as far as I can see, but the free version of Warp is a generous offering for users who would otherwise not be using a VPN.
Earlier quoted context omitted.
What's the actual vulnerability when simply using an unsecured wireless network? Sure, it's easy for them to MitM you if you're using http, but if you're only using https, what's the harm?
DNS queries and the unencrypted parts of the HTTPS protocol (like SNI without recent enhancements). So passive sniffers can at least see what sites you're visiting.
There's also a technical version of this post: https://blog.cloudflare.com/warp-technical-challenges/ I'm hyped to see Rust code running on so many phones.
* I read that cloudflare generates a unique id for each install and the purpose was to track referrals. Consider adding an option to opt out of the unique id tracking since some users will be concerned about it.
* Any plans to add an option to use an ip from cloudflare instead of my ip address being visible to the websites I visit, at least on the paid plan? I know this opens a can of worms dealing with abuse of the service which could lead to certain ip addresses belonging to cloudflare being blacklisted.
Earlier quoted context omitted.
Trust with what? Warp is specifically designed to reveal your IP address. This is as anti-privacy VPN as a VPN can be. Which is absolutely not surprising coming from a US corporation.
It leaks IP and DNS resolvers. It's not designed to be anonymous, but it does fully encrypt all traffic coming from your device to the internet, meaning, it's great when you don't want to trust the ISP, public Wifi or even the cell provider with your traffic.
be careful what you wish for.
I was openly critical of Cloudflare when they announced Warp the first time. My accusations were over-reaching, and I ultimately retracted them. But I'm still skeptical, and I still won't use Warp. Here's what still bothers me: Cloudflare is a single company with points of presence all over the world, handling traffic for websites all over the world (including some big ones), and now trying to attract consumers world…
How would your “better Internet” work when it reaches an ocean? Maybe this doesn’t matter to you, as someone who lives in the US and mostly access websites hosted in the US; but for the majority of the world, getting access to “the Internet” is more about tapping into the millisecond-latency backbone of submarine cables, than it is about last-mile residential ISPs. Those submarine cables form a natural monopoly, ther…
Just going to throw this out there for anyone who is hesitant using a vpn managed by another service. You can set up your own easily using the ansible scripts provided by trailofbits, which supports both IPSEC and wireguard. https://github.com/trailofbits/algo a small DO (Digital Ocean) instance is only $5 a month and comes with 1TB outbound bandwidth (last I checked), which ends up being cheaper than most commercial…
Damn, that would be so cool.